What is the official website of Accenture Colombia ?

The official website of Accenture Colombia is https://www.accenture.com/co-es.

What is Accenture Colombia's cybersecurity risk score?

Accenture Colombia has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Accenture Colombia experienced?

According to Rankiteo, Accenture Colombia currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Accenture Colombia been affected by any supply chain cyber incidents ?

According to Rankiteo, Accenture Colombia has been affected by a supply chain cyber incident involving Accenture, with the incident ID ACC1783463023.

Does Accenture Colombia have SOC 2 Type 1 certification ?

According to Rankiteo, Accenture Colombia is not certified under SOC 2 Type 1.

Does Accenture Colombia have SOC 2 Type 2 certification ?

According to Rankiteo, Accenture Colombia does not hold a SOC 2 Type 2 certification.

Does Accenture Colombia comply with GDPR ?

According to Rankiteo, Accenture Colombia is not listed as GDPR compliant.

Does Accenture Colombia have PCI DSS certification ?

According to Rankiteo, Accenture Colombia does not currently maintain PCI DSS compliance.

Does Accenture Colombia comply with HIPAA ?

According to Rankiteo, Accenture Colombia is not compliant with HIPAA regulations.

Does Accenture Colombia have ISO 27001 certification ?

According to Rankiteo,Accenture Colombia is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Accenture Colombia operate in ?

Accenture Colombia operates primarily in the Business Consulting and Services industry.

How many employees does Accenture Colombia have ?

Accenture Colombia employs approximately 492 people worldwide.

Does Accenture Colombia own any subsidiaries ?

Accenture Colombia presently has no subsidiaries across any sectors.

How many LinkedIn followers does Accenture Colombia have ?

Accenture Colombia's official LinkedIn profile has approximately 91,452 followers.

What is the NAICS classification code for Accenture Colombia ?

Accenture Colombia is classified under the NAICS code 5416, which corresponds to Management, Scientific, and Technical Consulting Services.

Does Accenture Colombia have a Crunchbase profile ?

No, Accenture Colombia does not have a profile on Crunchbase.

Does Accenture Colombia have a LinkedIn profile ?

Yes, Accenture Colombia maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/accenture-colombia.

How many cybersecurity incidents has Accenture Colombia experienced ?

As of August 10, 2026, Rankiteo reports that Accenture Colombia has experienced 6 cybersecurity incidents.

How many peer or competitor companies does Accenture Colombia have ?

Accenture Colombia has an estimated 19,662 peer or competitor companies worldwide.

What types of cybersecurity incidents has Accenture Colombia faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Accenture Colombia

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Accenture Colombia Vendor Cyber Rating & Cyber Score

accenture.com

Add Your Compliance Badge

Accenture es una empresa líder mundial en servicios profesionales que ayuda a las principales empresas, gobiernos y otras organizaciones del mundo a construir su núcleo digital, optimizar sus operaciones, acelerar el crecimiento de los ingresos y mejorar los servicios a los ciudadanos, creando valor tangible con rapidez y escala. Somos una empresa impulsada por el talento y la innovación con aproximadamente 799.000 personas que atienden a clientes en más de 120 países. La tecnología está en el centro del cambio actual y somos uno de los líderes mundiales en ayudar a impulsar ese cambio, con sólidas relaciones con el ecosistema. Combinamos nuestra fortaleza en tecnología y liderazgo en la nube, los datos y la inteligencia artificial con

Accenture Colombia A.I CyberSecurity Scoring

Scoring History

Accenture Colombia

Accenture Colombia CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Accenture Poland

Breach

100

8/2026

ACCZABNETBLU178...

Accenture

Breach

7/2026

ACC1783556620

Accenture

Breach

7/2026

Accenture

ACC1783463023

Accenture

Breach

4/2026

ACC1783859045

Accenture

Breach

100

1/2025

ACC1783528528

Accenture Colombia

Ransomware

100

08/2021

ACC14818322

Loading…

A.I.

Accenture Colombia Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Accenture Colombia

Incidents vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for Accenture Colombia in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Accenture Colombia in 2026.

Incident Types Accenture Colombia vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for Accenture Colombia in 2026.

Incident History - Accenture Colombia (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Accenture Colombia Subsidiaries

Accenture Colombia

Business Consulting and Services

Website: https://www.accenture.com/co-es

Company Size: 10,001+ employees

AccentureBusiness Consulting and Services

Accenture in IndiaIT Services and IT Consulting

Accenture ArgentinaBusiness Consulting and Services

Accenture BrasilIT Services and IT Consulting

Accenture SongMarketing Services

Accenture EspañaBusiness Consulting and Services

Accenture Southeast AsiaBusiness Consulting and Services

Accenture Federal ServicesIT Services and IT Consulting

Accenture UK & IrelandIT Services and IT Consulting

Accenture PortugalIT Services and IT Consulting

Accenture MéxicoBusiness Consulting and Services

Accenture the NetherlandsBusiness Consulting and Services

Accenture NordicsIT Services and IT Consulting

Accenture AustraliaIT Services and IT Consulting

Accenture PolandIT Services and IT Consulting

Accenture SecurityIT Services and IT Consulting

Accenture na Slovensku IT Services and IT Consulting

Accenture HungaryIT Services and IT Consulting

Accenture IsraelBusiness Consulting and Services

Accenture DACHIT Services and IT Consulting

Accenture FranceIT Services and IT Consulting

Accenture BelgiumIT Services and IT Consulting

Accenture in South AfricaBusiness Consulting and Services

Accenture BalticsIT Services and IT Consulting

Accenture GreeceInformation Technology & Services

Accenture Middle EastBusiness Consulting and Services

Accenture BulgariaIT Services and IT Consulting

Accenture JapanBusiness Consulting and Services

Blue Horseshoe, Part of AccentureTransportation, Logistics, Supply Chain and Storage

Trivadis - Part of AccentureIT Services and IT Consulting

biGENIUSIT Services and IT Consulting

Accenture in the PhilippinesIT Services and IT Consulting

Accenture ItaliaIT Services and IT Consulting

Loading…

Accenture Colombia Similar Companies

DKSH

dksh.com

About DKSH DKSH’s purpose is to enrich people’s lives. For 160 years, we have been marketing, selling, and distributing high-quality products and brands for multinational and Fortune 500 companies. Through our Business Units Consumer Goods, Healthcare, Performance Materials, and Technology, we deliver sustainable growth for our partners. We contribute to improving the quality of life for our employees and people in the local communities in which we operate. Headquartered in Switzerland, DKSH is publicly listed and operates in 36 markets across Asia Pacific, Europe, and North America. We employ over 28,000 specialists and produced net sales of CHF 11.1 billion in 2024. Why it's great to work with us At DKSH, we are driven by a purpose that goes beyond the ordinary: enriching people's lives. Through the products and services we provide, DKSH positively impacts millions of lives everyday. Join our team where entrepreneurship meets flexible work arrangements. Take the leap and start a journey where you can grow and make a difference! Learn more about working at DKSH: https://bit.ly/dksh-careers View jobs now: https://bit.ly/dksh-jobs *We do not send job offers from free email services (Gmail, Yahoo mail, Hotmail, etc.), request money from candidates, or require personal documents like bank account details, tax forms, or credit card information from candidates before they are hired: https://bit.ly/dksh-recruitment-disclaimer.

Bain & Company

bain.com

Bain & Company is a global consultancy that helps the world’s most ambitious change makers define the future. Across 65 cities in 40 countries, we work alongside our clients as one team with a shared ambition to achieve extraordinary results, outperform the competition, and redefine industries. We complement our tailored, integrated expertise with a vibrant ecosystem of digital innovators to deliver better, faster, and more enduring outcomes. Our 10-year commitment to invest more than $1 billion in pro bono services brings our talent, expertise, and insight to organizations tackling today’s urgent challenges in education, racial equity, social justice, economic development, and the environment. We earned a platinum rating from EcoVadis, the leading platform for environmental, social, and ethical performance ratings for global supply chains, putting us in the top 1% of all companies. Since our founding in 1973, we have measured our success by the success of our clients, and we proudly maintain the highest level of client

Publicis Sapient

publicissapient.com

Publicis Sapient is a technology company that provides enterprise AI platforms and services. With over 30 years of digital business transformation experience, we enable enterprise clients to transform how they operate and serve their customers, unlocking new value and enabling them to thrive in an AI-driven world. Our platforms use AI  built off this deep enterprise context to help them modernize, build agentic solutions, and sustain their competitive advantage. The combination of our AI platforms and the expertise of our people enables us to deliver faster and more effective outcomes through solutions that are specific to the unique needs of our clients’ businesses, their industries and their customers.   Publicis Sapient is the technology hub of Publicis Groupe, uniting 20,000 people worldwide across 28 countries. For more information, visit publicissapient.com.

Straive

straive.com

At Straive, we operationalize Data Analytics and AI for global enterprises, working with several Fortune 500 companies. We don’t just build world-class data analytics and AI solutions—we embed them seamlessly into your core workflows. This drives greater efficiency, enhances user experience, and boosts client revenue, setting you apart from the competition. Straive is a global leader in AI-driven value creation, business transformation, and Global Capability Center (GCC) delivery — empowering private-equity portfolio companies, mid-market firms, and enterprises with scalable, technology-enabled execution. We serve clients across industries, including Banking, Financial and Information Services, Retail, Media and Technology, EdTech, Science and Research, Logistics and Supply Chain, and Pharma & Life Sciences. Our strategically placed team of 18,000 employees operates in nine countries: the Philippines, India, the United States, Nicaragua, Vietnam, the United Kingdom, Singapore, South Africa, and Canada. We have been recognized as a Star Performer in Data & AI Services Specialists – Everest’s North America PEAK Matrix 2025, and as a Leader in AIM’s Pema Quadrant of Agentic AI Service Providers – 2025. In Nov 2023, Straive acquired Gramener, an award-winning, design-led data science company, enhancing our data, analytics, and AI capabilities. In June 2025, we acquired SG Analytics, a leading provider of AI-powered insights and contextual analytics services. Straive is an equal opportunity employer, committed to celebrating diversity, equity, and inclusion. We do not tolerate discrimination or harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic under federal, state, or local laws. Hiring decisions are based solely on qualifications, merit, and business needs at the time.

Slalom

slalom.com

Slalom is a fiercely human business and technology consulting company that leads with outcomes to bring more value, in all ways, always. We team with leaders who expect more. So we bring more. From strategy through delivery, our agile teams across 53 offices in 12 countries collaborate with you to bring powerful customer experiences, innovative ways of working, and new products, services, and businesses to life. Every day, we work at the forefront of industry, combining our deep roots in technology and data, to help you tackle challenges, improve operations, and drive sustainable growth. It’s why we are trusted by leaders across the majority of the Global 1000, many of the world’s most successful enterprise, mid-market, and emerging companies, and more than 500 high-impact public sector agencies, foundations, and universities. We lead with a balance of heart and practicality, curiosity and agility, local soul and global expertise. That means understanding your culture, goals, organization, and customers. That means being tireless problem solvers. And that means always standing by you as your trusted advisor, respectful challenger, and unwavering champion. Even our partnerships are built different. For more than 20 years, we've sought out and made strategic investments in the world’s emerging and leading technology platforms. Our 360-degree relationships with these innovators, built on mutual trust and respect, has cemented our position as a premier (and often first) partner of choice. We work together as one to offer tailored solutions that unlock the full potential of these technologies. At Slalom, we bring more day-one advantages, more connections and breakthroughs, more doing the right thing, more care for you and your team, and more return on your investment. So that together, we can dream bigger, move faster, and build better tomorrows for all.

Stefanini Group

stefanini.com

Global Tech Consulting Company All in One. Stefanini is a Brazilian multinational company with 37 years of experience and presence in 41 countries. With more than 35,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results. We operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. Recognized as the most internationalized technology company in Brazil, according to the Fundação Dom Cabral (FDC) ranking, Stefanini is global by essence, collaborative by nature, and strategic by vocation. It is also a pioneer in applying Artificial Intelligence to transform businesses through an end-to-end AI-First approach.

Stefanini Brasil

stefanini.com.br

Global Tech Consulting Company All in One. Stefanini is a Brazilian multinational company with 37 years of experience and presence in 41 countries. With more than 38,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results. We operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. Recognized as the most internationalized technology company in Brazil, according to the Fundação Dom Cabral (FDC) ranking, Stefanini is global by essence, collaborative by nature, and strategic by vocation. It is also a pioneer in applying Artificial Intelligence to transform businesses through an end-to-end AI-First approach.

PwC Deutschland

pwc.de

PwC is the leading auditing and consulting company in Germany. As an independent member of the international PwC network, it offers its services worldwide. PwC audits and advises leading industrial and service companies of all sizes. In Germany, over 15,000 employees generate revenues of more than three billion euros in the divisions of audit and audit-related services (assurance solutions), tax and legal advice (tax & legal solutions), transformation, risk & regulatory, sustainability, cloud & digital, and deals. The experts in the different service lines work together across all divisions and from different offices in Germany, making it possible to meet with them individually at 20 locations nationwide. Also part of PwC is Strategy& – a global team of practice-oriented strategists. You can find more information about our team of strategy advisors here: https://www.strategyand.pwc.com/ Thanks to its worldwide network, PwC is able to provide its clients with professional services around the world and to offer cross-border support. As an independent member of this network, PwC Germany has access to more than 365,000 employees in 136 countries. You can find current vacancies at PwC Germany and information on PwC’s different divisions on our career page: www.karriere.pwc.de If you have any questions about vacancies at the German firm or the application process, a member of our staff will be happy to help. Simply give us a call at +49 69 9585 - 5226 or send us an e-mail to: [email protected] For more insights into the world of PwC Germany, you can follow us on the following channels: Xing PwC Germany: www.xing.com/company/pwcdeutschland X PwC Germany: @pwc_de Instagram PwC Germany: www.instagram.com/pwc_de YouTube PwC Germany: www.youtube.com/user/pwcde YouTube PwC Career: www.youtube.com/user/pwccareerde Imprint: https://www.pwc.de/impressum

Applus+

cb applus.com

Applus+ is a worldwide leader in the testing, inspection, and certification sector. We are a trusted partner, enhancing the quality and safety of our clients’ assets and infrastructures while safeguarding their operations and improving their environmental performance. Our innovative approach, technical capabilities and highly-skilled and motivated workforce of over 25,000 employees assure operational excellence across multiple sectors in more than 65 countries. We offer a complete portfolio of solutions that address a range of needs, from asset integrity management to statutory compliance-based inspections. We place a strong emphasis on technological development, digitalisation and innovation, as well as having the latest knowledge of regulatory requirements.

Loading…

NEWS

Accenture Colombia CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 09, 2025 07:00 AM

real-world gen AI use cases from the world's leading organizations

Gen AI is everywhere, as top companies, governments, researchers, and startups showcase how they're already using Google's AI solutions to...

Read Article

September 10, 2025 07:00 AM

Accenture expands identity security via IAMConcepts purchase

Accenture has acquired IAMConcepts, a Canadian company specialising in identity and access management (IAM) services, for an undisclosed...

Read Article

August 27, 2025 07:00 AM

Accenture Expands Salesforce and AI Reach with NeuraFlash Acquisition

The acquisition extends Accenture's reach into the mid-market, and creates new opportunities for partners in the Salesforce and AWS...

Read Article

August 15, 2025 07:00 AM

Accenture to buy Australian cybersecurity firm CyberCX for reported $650 mln

Accenture said on Thursday it will buy Australian cybersecurity firm CyberCX in its largest-ever deal in the sector, with the Australian...

Read Article

July 11, 2025 07:00 AM

Accenture, Microsoft join forces to develop Gen AI cybersecurity tools

Accenture and Microsoft have announced a collaborative investment to develop advanced cybersecurity solutions powered by gen AI.

Read Article

July 11, 2025 07:00 AM

Accenture, Microsoft partner to tackle cyber threats with AI

Accenture and Microsoft have announced an expanded collaboration to develop generative AI-driven cybersecurity solutions.

Read Article

July 08, 2025 07:00 AM

UDC launches ‘Cybersecurity Tech Hub’ at Congress Heights campus

New apprenticeship program launched by the University of the District of Columbia's Cybersecurity Tech Hub aims to fill cybersecurity job...

Read Article

May 27, 2025 07:00 AM

New Cybersecurity Tech Hub Launches in Congress Heights

University of the District of Columbia, Accenture and PeopleShores partner to expand career opportunities for D.C. residents.

Read Article

April 21, 2025 07:00 AM

SAP Legacy System Retirement in Record Time: How DuPont, Accenture & JiVS Did It Fast

DuPont launched a bold initiative: retire all 17 legacy SAP systems and archive more than 50 terabytes of historical data, including hundreds of ADK and...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…